Privacy Policy

Last updated: March 8, 2026

🔒

Your health data is encrypted end-to-end and never sold to third parties. We believe your health information is deeply personal — and it should stay that way.

1. Introduction

Gastripal ("we", "our", "us") operates the Gastripal mobile application (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect only the minimum data necessary to provide you with a great experience:

  • Voice recordings — processed locally on your device, only the transcribed text is stored securely
  • Health diary entries — your daily notes and reflections
  • Symptom tags and intensity levels — automatically extracted by AI from your entries
  • Account information — email address for authentication
  • App usage analytics — anonymous, aggregate data to improve the Service

3. How We Use Your Data

We use your data exclusively to:

  • Provide and maintain the Service
  • Generate personalized health trend analysis and insights
  • Improve our AI tagging accuracy (using anonymized, aggregated data only)
  • Send you important service-related notifications
  • Provide customer support

We do not sell, rent, or share your personal health data with advertisers, data brokers, or any other third parties for their commercial purposes.

4. Data Storage & Security

Your data is stored on secure servers hosted by Supabase, with encryption at rest and in transit. We employ industry-standard security measures including:

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • Row-level security policies ensuring data isolation
  • Regular security audits and vulnerability assessments

5. Your Rights

You have the right to:

  • Access all personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data and account
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, please contact us at the email provided below.

6. Third-Party Services

We use the following third-party services to operate our application:

  • Supabase — Database and authentication
  • Apple App Store — App distribution and in-app purchases
  • OpenAI / Google AI — AI-powered text analysis (anonymized data only)

Each third-party service has its own privacy policy governing the use of your information.

7. Children's Privacy

Our Service is not directed to individuals under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date. You are advised to review this page periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us: